CVE-2025-31101: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vault Group Pty Ltd VaultRE Contact Form 7 allows Stored XSS.This issue affects VaultRE Contact Form 7: from n/a through 1.0...

CVE-2025-30899: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpeverest User Registration user-registration allows Stored XSS.This issue affects User Registration: from n/a through = 4.0.3...

CVE-2025-30763: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Olaf Lederer EO4WP fw-integration-for-emailoctopus allows Stored XSS.This issue affects EO4WP: from n/a through = 1.0.8.4...

CVE-2025-22628: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FolioVision Filled In filled-in allows Stored XSS.This issue affects Filled In: from n/a through = 1.9.2...

CVE-2025-26732: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in burgersoftware StoreBiz storebiz allows DOM-Based XSS.This issue affects StoreBiz: from n/a through = 1.0.32...

CVE-2025-30768: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mlaza jAlbum Bridge jalbum-bridge allows Stored XSS.This issue affects jAlbum Bridge: from n/a through = 2.0.18...

CVE-2025-30813: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in listamester Listamester listamester allows Stored XSS.This issue affects Listamester: from n/a through = 2.3.5...

PT-2025-13134

Name of the Vulnerable Software and Affected Versions moreconvert MC Woocommerce Wishlist versions 1.8.9 and earlier Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-13235

Name of the Vulnerable Software and Affected Versions kendysond Payment Forms for Paystack versions n/a through 4.0.1 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-13064

Name of the Vulnerable Software and Affected Versions cubecolour Audio Album versions 1.5.0 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject malicio...

PT-2025-13056

Name of the Vulnerable Software and Affected Versions Charitable versions 1.8.4.7 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This is a type of Cross-site Scripting attack. Recommendations For...

CVE-2025-30818: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mlaza jAlbum Bridge jalbum-bridge allows DOM-Based XSS.This issue affects jAlbum Bridge: from n/a through = 2.0.17...

WordPress plugin Job Colors for WP Job Manager: Cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-13263

Name of the Vulnerable Software and Affected Versions Acowebs Product Table For WooCommerce versions 1.2.3 and earlier Description The issue affects the Acowebs Product Table For WooCommerce, allowing Stored XSS due to improper neutralization of input during web page generation. Recommendations F...

PT-2025-13052

Name of the Vulnerable Software and Affected Versions Happy Addons for Elementor versions 3.16.2 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based Cross-site Scripting XSS. This means that an attacker could...

CVE-2024-9103

Improper Neutralization of Script in Attributes in a Web Page vulnerability in Forcepoint Email Security Blocked Messages module allows Stored XSS. This issue affects Email Security through 8.5.5...

CVE-2025-28935

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in puzich Fancybox Plus fancybox-plus allows Reflected XSS.This issue affects Fancybox Plus: from n/a through = 1.0.1...

CVE-2025-28924

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Simbul ZenphotoPress zenphotopress allows Reflected XSS.This issue affects ZenphotoPress: from n/a through = 1.8...

CVE-2025-26941

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in andymoyle Church Admin church-admin allows SQL Injection.This issue affects Church Admin: from n/a through = 5.0.18...

CVE-2025-27267

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in srcoley Random Quotes random-quotes allows Reflected XSS.This issue affects Random Quotes: from n/a through = 1.3...